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About this guide 



This support matrix lists requirements for all components in an HP ProLiant Essentials Vulnerability and Patch 
Management (VPM) Pack environment. Supported target systems and applications are also included. 

Where to go for additional help 

In addition to this guide, the following information sources are available. 

For additional information about Vulnerability and Patch Management Pack, see: 

• http:/ / www.hp.com/ go/ vpm 

• HP ProLiant Essentials Vulnerability and Patch Management Pack Installation Instructions 

• HP ProLiant Essentials Vulnerability and Patch Management User Guide 
For additional information about HP Systems Insight Manager (HP SIM), see: 

• http:/ / www.hp.com/ qo/hpsim 

HP SIM User Guide 

• HP Systems Insight Manager Help Guide 

HP contact information 

For the name of the nearest HP authorized reseller: 

• In the United States, see http://www.hp.com/service locator . 

• In other locations, see http://www.hp.com . 

For HP technical support: 

• In North America: 

• Call 1-800-HP-INVENT (1-800-474-6836). This service is available 24 hours a day, 7 days a week. 
For continuous quality improvement, calls may be recorded or monitored. 

• If you have purchased a Care Pack (service upgrade), call 1-800-633-3600. For more information 
about Care Packs, see the HP website http://www.hp.com . 

• Outside North America, call the nearest HP Technical Support Phone Center. For telephone numbers for 
worldwide Technical Support Centers, see the HP website http:/ / www.hp.com . 
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Vulnerability and Patch Management Pack 



The VPM server, the server on which Vulnerability and Patch Management Pack software is installed, must meet 
the following hardware and software requirements. Requirements listed for the VPM server are independent of 
requirements for HP SIM and any other applications that coexist on the VPM server. For specific hardware and 
software requirements for the HP SIM server, see the HP SIM User Guide. 

Table 1 Hardware requirements 

Component Specification 

Any HP x86 server — 

Memory At least 5 1 2 MB RAM 

Processor 1 .5 GHz or higher 

1 GB for Vulnerability and Patch Management Pack (1 50 MB in the TEMP directory for installation) 

Disk space 

Additional space for scan reports and patches 

File structure New Technology File System (NTFS) 

DVD-ROM drive - 



Table 2 Software requirements 
Component Specification 

Microsoft® Windows® 2000 Server SP4 
Windows 2000 Advanced Server SP4 
Microsoft Windows Server™ 2003, Standard Edition SP1 
Windows Server 2003, Enterprise Edition SP1 
Windows XP Professional SP2 



Operating system 
(32-bit versions 
only)* 



Microsoft Internet Information Services (IIS) 5.0 or later, installed and running** 
Services 

TCP/IP with DNS properly configured so that system names can be resolved to IP addresses 

Database An existing Microsoft SQL Server database can be used, or Microsoft Data Engine (MSDE) will be 

installed on the VPM server with the Vulnerability and Patch Management Pack installation. When 
changing databases during an upgrade, patch data from the previous database is not migrated. A full 
patch acquisition must be performed to repopulate the patch repository. 

Applications HP SIM 5.1 or later, installed and running on a Windows server with Windows Management 

(must be available on Instrumentation (WMI) Mapper 

the network) Mozilla Firefox 2.0 or Microsoft Internet Explorer 6.0 or 7.0 



Adobe® Acrobat® Reader 3.x or later (to view scan results) 



* HP SIM might have additional restrictions for supported service pack levels. 



** HP strongly recommends enabling HTTPS if HP SIM and Vulnerability and Patch Management Pack are installed on 
separate servers. For information about configuring HTTPS service in IIS, see http://support.microsoft.com/?kbid=324069 . 
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HP Systems Insight Manager 



HP SIM 5.1 or later must be installed on a Windows server. This release of Vulnerability and Patch Management 
Pack does not support HP SIM installed with a Linux or HP-UX operating system. 



VPM Acquisition Utility (optional) 



The VPM Acquisition Utility can be installed on a system with Internet access, enabling patch acquisitions and 
vulnerability updates without requiring the VPM server to be directly connected to the Internet. 

Table 3 lists the minimum requirement for the system on which the optional VPM Acquisition Utility is installed. 
Table 3 VPM Acquisition Utility requirements 
Component Specification 

Memory 256 MB RAM 

Processor 1 .5 GHz or higher 



Disk space 



12 MB 



Available space for downloading vulnerability patches 



Internet access (for downloading vulnerability patches) 



Windows 2000 Server SP4 



Windows 2000 Advanced Server SP4 



Operating system Windows 2000 Professional 



(32-bit versions only) Wjndows Wr 2003/ Sfandard Edjtion spl 



Windows Server 2003, Enterprise Edition SP1 



Windows XP Professional SP2 
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Target systems 



Target systems are managed by Vulnerability and Patch Management Pack. HP recommends installing 
HP Management Agents on ProLiant target systems to enable HP SIM to better identify the target systems. Enable 
WMI or Web Based Enterprise Management (WBEM) for other target systems. The VPM Patch Agent is 
automatically deployed when target systems are licensed to enable patches to be applied to the systems. 

Secure Shell (SSH) must be installed on Linux target systems. 

Table 4 lists the 32-bit operating systems that Vulnerability and Patch Management Pack supports. 
Table 4 Target operating systems 



Component 


Specification 




Windows 2000 Server SP3 or later 




Windows 2000 Advanced Server SP3 or later 




Windows 2000 Professional SP3 or later 




Windows Server 2003, Standard Edition 




Windows Server 2003, Enterprise Edition 




Windows Server 2003, Web Edition 


Operating system 
(32-bit versions only) 


Windows Small Business Server 2000 


Windows Small Business Server 2003 


Windows XP Professional 




Red Hat Enterprise Linux 2.1 ES forx86* 




Red Hat Enterprise Linux 3 ES for x86* 




Red Hat Enterprise Linux 4 ES for x86* 




Red Hat Enterprise Linux 2.1 AS for x86* 




Red Hat Enterprise Linux 3 AS for x86* 




Red Hat Enterprise Linux 4 AS for x86* 



* Red Hat systems must have a valid subscription to the Red Hat Network for patch acquisitions. A valid Red Hat Network 
license is required for each system to be patched. For information about subscribing to the Red Hat Network, see 
http://www.redhot.com . 

The Red Hat library, compat-libstdc++, must exist on the Red Hat target systems. 



NOTE: Vulnerability and Patch Management Pack is available in English (U.S.) for use only on English, French, 
Italian, German, Spanish, and Japanese versions of the operating system. 
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Supported applications 

Vulnerability and Patch Management Pack supports patching of the following applications on monitored systems: 

• All Microsoft applications for which patches are available (excluding Microsoft Office applications) 

• All applications included with Red Hat Linux 
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